$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: mPUNZ0PmJgcQByYTeU2dE1mGZzo1FMRiJOrfa9vr1zA= Subject key identifier: 61:49:08:70:DB:30:7B:CA:82:96:29:9E:2A:20:EE:AD:2B:EA:CE:AE Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 0352 Signing time: Sat 19 Jul 2025 01:25:32 +0000 Manifest this update: Sat 19 Jul 2025 01:25:32 +0000 Manifest next update: Sat 26 Jul 2025 01:25:32 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: lyaBgomnqkgUWcQ15XmZLql9VxJHMLC56v5tEMsFFdM=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Jul 19 01:25:32 2025 GMT Not After : Jul 26 01:25:32 2025 GMT Subject: CN=687af40c-06db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:74:a9:29:ac:38:88:ed:ee:f5:30:61:1b: a1:0a:9c:34:d2:1c:62:b1:6f:94:4f:e7:c7:76:47: b7:20:11:6c:9c:7f:fe:b7:36:8f:75:5f:7f:c6:60: bc:79:cc:3f:9c:75:0b:16:23:59:b5:60:6e:f1:b3: 89:b5:d4:4f:dd:50:14:07:f7:b9:70:ab:99:ec:7c: ac:fb:a3:4b:02:97:b1:c5:5c:c3:a2:3f:c4:34:04: 49:04:0e:f3:69:8b:42:50:ae:74:de:f4:58:3d:44: 51:f3:c1:aa:be:b1:3f:34:3e:67:3e:bc:3c:51:72: 1e:6f:00:22:db:68:75:dc:f9:1e:28:d8:f0:ee:4c: 10:8c:d9:ba:d2:9b:a5:87:f9:6e:a0:77:e6:ff:f1: a4:8c:fb:38:3a:2a:24:68:b5:c2:c7:26:e3:f0:d7: 8e:04:4e:1b:8f:09:0a:02:07:20:65:8e:46:ec:29: 11:ec:25:31:87:da:6a:50:4a:1e:97:81:a0:75:5e: 38:a1:38:be:c6:28:0c:8e:1a:3d:85:c9:51:7e:3e: db:28:dc:f3:b5:02:4c:7a:2a:d3:54:05:6d:e1:c7: 55:b1:23:cb:29:6a:b8:70:c8:2f:42:ad:2e:8e:e8: 3c:f9:14:bf:ec:db:a8:4b:4f:12:7a:3b:44:d2:d6: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:08:70:DB:30:7B:CA:82:96:29:9E:2A:20:EE:AD:2B:EA:CE:AE X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:c3:9a:72:1f:e2:b6:62:69:f1:34:2c:b2:53:72:7a:aa:ff: 65:80:b7:7b:ef:9e:86:36:b8:d1:72:96:25:ce:36:1b:bf:3f: ab:12:fc:98:31:51:f4:fd:0b:bc:f4:99:7f:12:b9:21:be:11: c3:00:8b:d0:73:a7:58:2b:d8:9a:6a:af:7c:35:09:41:4b:b0: ef:52:e8:81:ae:98:79:df:e5:ef:81:cb:3e:36:51:e4:e3:b1: ce:27:20:5c:f5:b7:d8:71:e9:55:5a:ff:aa:6d:74:26:43:b6: 06:8e:f0:38:8f:f2:e8:97:1a:6b:5d:94:b2:6b:cb:32:18:12: aa:ef:a5:0a:98:f5:a6:95:ef:5a:ff:5e:bb:ab:05:ad:a5:bb: 54:fe:0a:4c:6a:27:36:3d:fe:cb:23:2b:9a:c3:44:62:6e:1f: 41:60:a7:e0:e7:66:35:51:15:40:36:08:50:b1:59:bd:4e:90: 0e:4d:98:e0:b5:7c:00:f0:da:40:35:fa:77:76:07:16:6a:eb: 1c:43:c0:b3:0e:89:c1:03:76:b9:50:61:0d:ad:e2:dd:30:0f: 1f:65:78:39:35:46:58:f7:bb:f0:e2:ae:e1:8c:ae:fc:9e:f5: 4d:6a:a1:c4:64:d3:90:e1:63:88:b9:23:ae:be:29:77:2d:e1: 6a:cf:9b:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwNzE5MDEyNTMyWhcNMjUwNzI2MDEyNTMyWjAYMRYwFAYD VQQDEw02ODdhZjQwYy0wNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc10qSmsOIjt7vUwYRuhCpw00hxisW+UT+fHdke3IBFsnH/+tzaPdV9/xmC8 ecw/nHULFiNZtWBu8bOJtdRP3VAUB/e5cKuZ7Hys+6NLApexxVzDoj/ENARJBA7z aYtCUK503vRYPURR88GqvrE/ND5nPrw8UXIebwAi22h13PkeKNjw7kwQjNm60pul h/luoHfm//GkjPs4OiokaLXCxybj8NeOBE4bjwkKAgcgZY5G7CkR7CUxh9pqUEoe l4GgdV44oTi+xigMjho9hclRfj7bKNzztQJMeirTVAVt4cdVsSPLKWq4cMgvQq0u jug8+RS/7NuoS08SejtE0tbkLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFJCHDb MHvKgpYpniog7q0r6s6uMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrw5pyH+K2YmnxNCyyU3J6qv9lgLd7756GNrjRcpYlzjYbvz+rEvyY MVH0/Qu89Jl/ErkhvhHDAIvQc6dYK9iaaq98NQlBS7DvUuiBrph53+Xvgcs+NlHk 47HOJyBc9bfYcelVWv+qbXQmQ7YGjvA4j/LolxprXZSya8syGBKq76UKmPWmle9a /167qwWtpbtU/gpMaic2Pf7LIyuaw0Ribh9BYKfg52Y1URVANghQsVm9TpAOTZjg tXwA8NpANfp3dgcWauscQ8CzDonBA3a5UGENreLdMA8fZXg5NUZY97vw4q7hjK78 nvVNaqHEZNOQ4WOIuSOuvil3LeFqz5vZ -----END CERTIFICATE-----Generated at Sun Jul 20 15:07:10 2025 by rpki-client